Secure Database Using Trusted Platform Module for Encrypted Data Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing database systems lack secure mechanisms to protect data from unauthorized access, especially when attackers have control over the physical hardware or software, and cannot operate on encrypted data without exposing it in plaintext form.
Innovation Solution
Integrating a secure hardware unit, such as a Trusted Platform Module, into the database system to decrypt and process encrypted data, ensuring that only the secure hardware unit performs operations on unencrypted data, which is then re-encrypted and returned to the database system, maintaining encryption at all times within the database system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored in encrypted form in the database system, then data security is improved, but the ability to perform database operations on the data deteriorates
Solution Approach 1:
A secure hardware unit (TPM) is introduced as an intermediary component between the database system and the encrypted data. The TPM decrypts the data securely, performs the required database operations, and re-encrypts the results, allowing operations on encrypted data without exposing plaintext to the database system or attacker.
Solution Approach 2:
The system is segmented into distinct functional components: the database system handles encrypted data storage and retrieval, the secure hardware unit handles decryption and processing, and the database client handles encryption and result decryption. This segmentation allows each component to operate on data in its appropriate form without compromising security.
2Ease of operation
If data is decrypted and processed in the database system, then database operation capability is improved, but data security deteriorates due to exposure in plaintext
Solution Approach 1:
The secure hardware unit acts as a mediator that performs decryption and processing in an isolated, secure environment. The database system never sees plaintext data, only encrypted forms, while the TPM securely bridges the gap between encrypted storage and processing requirements.
Solution Approach 2:
The traditional mechanical approach of decrypting data in the database system is replaced with a hardware-based cryptographic system. The TPM uses hardware security modules and cryptographic primitives to perform decryption and processing, eliminating the need for software-based decryption that would expose plaintext to the database system.
3Reliability
If a secure hardware unit is integrated into the database system, then data security is improved, but device complexity increases
Solution Approach 1:
The secure hardware unit is designed to be self-contained with its own key management, decryption, and processing capabilities. The TPM handles all cryptographic operations autonomously, requiring minimal integration with the database system architecture. The unit serves itself by managing its own security context and performing operations without external intervention.
Solution Approach 2:
The secure hardware unit is designed as a universal module that can perform multiple functions: key storage, data decryption, data encryption, and processing. This multi-functionality reduces the need for separate dedicated components for each function, thereby limiting the increase in overall system complexity despite adding security capabilities.
Data Source
AI summary
Methods, systems, and apparatus, including a system that includes a secure hardware unit; and a database system including one or more processors; and a computer-readable medium having stored instructions that, when executed by the one or more processors, cause the one or more processors to perform operations including: receiving a client request to perform a database operation using first encrypted data as an encrypted value of a field to be operated on by the database operation, where the first encrypted data has been encrypted by a database client using a first encryption key; providing, to the secure hardware unit, a system request for performing one or more data processing operations, the system request including (i) the first encrypted data and (ii) data identifying the first encryption key; and receiving, from the secure hardware unit, output data representing an output of the one or more data processing operations.